Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 651:

  What is an advantage of using OSPF instead of RIPv2?

  A. It does not have the problem of count to infinity.
  B. OSPF has a higher hop-count value.
  C. OSPF includes bandwidth information in the distance vector.
  D. OSPF uses DUAL for optimal shortest path calculation.
  A. It does not have the problem of count to infinity.

• Question 652:

  DNS logging can capture URL resolution requests and responses. How can these two assist with identifying or reconstructing a compromise or incident? (Choose two.)

  A. The DNS queries will identify the external server that was being accessed for the incident transactions.
  B. The DNS name may exhibit exfiltrated data as the subdomain.
  C. The DNS server can resolve local subdomain names and refer to an outside DNS server for external service name resolution.
  D. The DNS query translates a URL to an IP address.
  A. The DNS queries will identify the external server that was being accessed for the incident transactions.
  B. The DNS name may exhibit exfiltrated data as the subdomain.

• Question 653:

  What are two examples of the impacts of cryptography on security investigations that an analyst must know? (Choose two.)

  A. Attackers can attack the cryptographic algorithms.
  B. Cryptographic algorithms make it impossible for an attacker to carry out an attack.
  C. Attackers can use cryptography to hide their attacks.
  D. Cryptography does not offer any security against attacks.
  A. Attackers can attack the cryptographic algorithms.
  C. Attackers can use cryptography to hide their attacks.

• Question 654:

  What best describes a brute-force attack?

  A. breaking and entering into a physical building or network closet
  B. an attacker's attempt to decode a cipher by attempting each possible key combination to find the correct one
  C. a rogue DHCP server that is posing as a legitimate DHCP server on a network segment
  D. an attacker inserting itself between two devices in a communication session and then taking over the session.
  B. an attacker's attempt to decode a cipher by attempting each possible key combination to find the correct one

• Question 655:

  What is the purpose of an exploit kit in a client-side attack?

  A. hides an iframe in a legitimate webpage to redirect the user to an exploit server
  B. profiles the user's computer and delivers exploit code to the computer based on its OS, browser, and applications
  C. beacons to an attacker's command and control servers, allowing the attacker to issues commands to the user's machine
  D. compromises a web-server to carry out DDoS attacks as part of a botnet
  B. profiles the user's computer and delivers exploit code to the computer based on its OS, browser, and applications

• Question 656:

  Which of the following is an open source feed for threat data?

  A. Cyber Squad ThreatConnect
  B. BAE Detica CyberReveal
  C. MITRE CRITs
  D. Cisco AMP Threat Grid
  C. MITRE CRITs

• Question 657:

  What are two limitations to deploying a local SPAN to monitor traffic? (Choose two.)

  A. Local SPAN functionality varies depending on the platform and software revision that are used.
  B. Local SPAN can be configured, but dropped packets may occur when applying it to the destination interface.
  C. Since local SPAN is run in software, it provides a cost-effective solution, compared to network taps.
  D. The monitoring interface can become a bottleneck during periods of high use.
  E. Minimal filtering is possible by specifying the interface directionally or VLAN.
  A. Local SPAN functionality varies depending on the platform and software revision that are used.
  D. The monitoring interface can become a bottleneck during periods of high use.

• Question 658:

  Which definition of vulnerability is true?

  A. an exploitable, unpatched and unmitigated weakness in software
  B. an incompatible piece of software
  C. software that does not have the most current patch applied
  D. software that was not approved for installation
  A. an exploitable, unpatched and unmitigated weakness in software

• Question 659:

  What event types does FMC record?

  A. standard common event logs types
  B. successful login event logs
  C. N/A
  C. N/A

• Question 660:

  In asset management, what is used to create a list of assets owned by the organization?

  A. Asset inventory
  B. Asset acceptable use
  C. Asset disposal
  D. Asset category
  A. Asset inventory